Purpose: Security concern
Description: Randon: As a user I am very much concerned and request MetaMask not to pull token randomly from Blockchain but to create a system that pulls only genuine token for user. Pulling randomly is very risky expose Users to Suspicious Tokens. This selection pulling of genuine Token avoid users being scammed. Let this can concern be taken seriously.
I completely understand the concern, especially for newer users. One important thing to clarify is that MetaMask doesn’t create tokens or randomly decide which tokens exist on a blockchain.
Tokens are created by projects or individuals by deploying smart contracts on the network. Since most blockchain networks are permissionless, anyone can create a token and send it to an address, even if the wallet owner never requested it.
MetaMask can help identify, display, and warn users about potentially suspicious tokens, but it can’t control what other people create on the underlying blockchain.
Thank you for flagging this - it’s a valid concern and one we hear often from newer users.
To build on Oxsoltani’s explanation: MetaMask doesn’t create, select, or “pull” tokens onto your wallet. Most blockchains are permissionless by design, so anyone can deploy a token contract and send it directly to any address - including yours.
What MetaMask does to help:
- Enhanced token detection is on by default for new users on EVM networks and Solana, using aggregated community token lists: How to display tokens in MetaMask | MetaMask Help Center
Unverified token warnings flag tokens that can’t be confirmed by enough trusted sources. This is informational only and doesn’t block transactions.
MetaMask doesn’t maintain an official “approved” token list - verification is probabilistic, not absolute, so user diligence still matters.
For extra safety, never interact with unfamiliar or airdropped tokens.
If you’d like stricter filtering by default, I’d suggest submitting this as a formal Feature Request.